Oracle E-Business Suite Workflow Vulnerability in Admin Screens and Grants UI Allowing Unauthorized Data Access and Modification

A vulnerability exists in the Oracle Workflow component of Oracle E-Business Suite, specifically within the Admin Screens and Grants UI. This issue affects versions 12.2.3 through 12.2.14. The vulnerability is easily exploitable, allowing a low-privileged attacker with network access via HTTP to compromise Oracle Workflow. Successful exploitation could lead to unauthorized read access to certain Oracle Workflow data, as well as unauthorized updates, inserts, or deletions of other accessible data.

Impact

Exploitation of this vulnerability could result in unauthorized access to read, update, insert, or delete certain Oracle Workflow data.